yfPBuf_st Struct Reference

Full packet information structure. More...

#include <decode.h>

Data Fields

uint64_t ptime
 Packet timestamp in epoch milliseconds.
yfFlowKey_t key
 Flow key containing decoded IP and transport headers.
size_t allHeaderLen
 Length of all headers, L2, L3, L4.
struct pcap_pkthdr pcap_hdr
 pcap header
pcap_t * pcapt
 pcap struct
uint16_t iplen
 Packet IP length.
uint16_t ifnum
 Interface number packet was decoded from.
yfTCPInfo_t tcpinfo
 TCP information structure.
yfL2Info_t l2info
 Decoded layer 2 information.
size_t paylen
 Length of payload available in captured payload buffer.
uint8_t payload [1]
 Captured payload buffer.

Detailed Description

Full packet information structure.

Used in the packet ring buffer.


Field Documentation

uint16_t yfPBuf_st::ifnum

Interface number packet was decoded from.

Currently unused.

uint16_t yfPBuf_st::iplen

Packet IP length.

Flow key containing decoded IP and transport headers.

Decoded layer 2 information.

Length of payload available in captured payload buffer.

uint8_t yfPBuf_st::payload[1]

Captured payload buffer.

Note that this in a convenience field; the actual field is larger than one byte.

TCP information structure.


The documentation for this struct was generated from the following file: